The form at the above url contains the following statement:
"If you don’t want to receive marketing about Bupa products and services that we think are relevant to you, please contact us at optmeout@bupa.com"
Does anyone know if this is actually legal?
Some nuances might exist due to Brexit, but I think the differences don't apply in this case (see https://www.cookiebot.com/en/uk-gdpr/ ).